CVE ID:	CVE-2010-4172
Description:	Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.
Test IDs:	1.3.6.1.4.1.25623.1.0.122163   1.3.6.1.4.1.25623.1.0.103032   1.3.6.1.4.1.25623.1.0.68935   1.3.6.1.4.1.25623.1.0.840574
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4172 1024764 http://securitytracker.com/id?1024764 20101122 [SECURITY] CVE-2010-4172: Apache Tomcat Manager application XSS vulnerability http://archives.neohapsis.com/archives/fulldisclosure/2010-11/0285.html 20101122 [SECURITY] CVE-2010-4172: Apache Tomcat Manager application XSS vulnerability http://www.securityfocus.com/archive/1/514866/100/0/threaded 42337 http://secunia.com/advisories/42337 43019 http://secunia.com/advisories/43019 45015 http://www.securityfocus.com/bid/45015 45022 http://secunia.com/advisories/45022 57126 http://secunia.com/advisories/57126 ADV-2010-3047 http://www.vupen.com/english/advisories/2010/3047 ADV-2011-0203 http://www.vupen.com/english/advisories/2011/0203 APPLE-SA-2011-10-12-3 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html HPSBST02955 http://marc.info/?l=bugtraq&m=139344343412337&w=2 RHSA-2011:0791 http://www.redhat.com/support/errata/RHSA-2011-0791.html RHSA-2011:0896 http://www.redhat.com/support/errata/RHSA-2011-0896.html RHSA-2011:0897 http://www.redhat.com/support/errata/RHSA-2011-0897.html USN-1048-1 http://www.ubuntu.com/usn/USN-1048-1 http://support.apple.com/kb/HT5002 http://support.apple.com/kb/HT5002 http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html http://svn.apache.org/viewvc?view=revision&revision=1037778 http://svn.apache.org/viewvc?view=revision&revision=1037778 http://svn.apache.org/viewvc?view=revision&revision=1037779 http://svn.apache.org/viewvc?view=revision&revision=1037779 http://tomcat.apache.org/security-6.html http://tomcat.apache.org/security-6.html http://tomcat.apache.org/security-7.html http://tomcat.apache.org/security-7.html https://bugzilla.redhat.com/show_bug.cgi?id=656246 https://bugzilla.redhat.com/show_bug.cgi?id=656246 tomcat-sessionlist-xss(63422) https://exchange.xforce.ibmcloud.com/vulnerabilities/63422